Privacy

Technology Resourcing is committed to protecting your privacy in accordance with the Data Protection Act 1998 and the EU General Data Protection Regulation (GDPR). We collect, use and disseminate the personal information you provide to us only in accordance with the policies and procedures outlined in this section.

Within this policy, the following terms are defined as:-

‘Consent’ means any freely given, specific, informed and unambiguous indication of an individual’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him/her;

‘Data Controller’ means an individual or organisation which, alone or jointly with others, determines the purposes and means of the processing of personal data;

‘Data Processor’ means an individual or organisation which processes personal data on behalf of the data controller;

‘Personal Data’ means any information relating to an individual who can be identified, such as by a name, an identification number, location data, or an online identifier;

‘Processing’ means any operation or set of operations performed on personal data, such as collection, recording, organisation, structuring, storage (including archiving), adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

‘Profiling’ means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to an individual, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements;

‘Pseudonymisation’ means the processing of personal data in such a manner that the personal data can no longer be attributed to an individual without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable individual;

Technology Resourcing processes personal data in relation to our own staff, work-seekers and individual client contacts and is a data controller for the purposes of the Data Protection Laws; we process our data based on Legitimate Interests.

GDPR defines legitimate interests as lawful data processing whereby “processing is necessary under the Legitimate Interests of the Controller or Third Party, unless these interests are overridden by the individual’s interests or fundamental rights”. The reason for this lawful basis was established through Technology Resourcing conducting a Legitimate Interest Assessment. We do not you’re your Personal Information for activities where our interests are overridden by the impact on you (unless we are otherwise required for compliance with a legal or regulatory obligation or permitted to by law).

Technology Resourcing will only process personal data where it has a legal basis for doing so, which also may include to fulfil a contract we are about to enter into or have entered into with you; or when it is our legal or regulatory duty.

We do not process Sensitive Data, which is outlined in Article 9(1) as racial or ethnic origin; political opinion; religious or philosophical beliefs; trade union membership; data concerning health or sex life and sexual orientation; genetic data; and biometric data, and defined above.

Technology Resourcing does not knowingly collect data relating to children. We do not employ children, and as such does not retain any personal data of children.

Technology Resourcing will collect your Personal Information directly from you and from other sources including when you apply for a job via a Job Board, directly through our website, from Social Media sites such as LinkedIn, or when you provide us with your details during a job fair, promotional, networking or training event.

Technology Resourcing may hold personal data on individuals for the following purposes:-

Staff administration;

Advertising, marketing and public relations;

Accounts and records;

Administration and processing of work-seekers’ personal data for the purposes of providing work-finding services, including processing using software solution providers and back office support;

Administration and processing of clients’ personal data for the purposes of supplying/introducing work-seekers

Data Sharing

Technology Resourcing is the sole owner of the information collected on the company website. We will not sell, share, or rent this information to others in ways that differ from that disclosed in this statement. Either Technology Resourcing or third parties, such as independent auditors, may access some or parts of your registration information.

Either Technology Resourcing or third parties, such as independent auditors, prospective employers, intermediaries such as accounts may access some or parts of your registration information. Before transferring personal data to any third party, Technology Resourcing will always establish that it has a legal reason for making the transfer.

When responding to a job advert and by accepting these terms and conditions and the acceptance of the registration contract, the applicants personal data will be added to Technology Resourcing’s database and will be made available to be submitted to other job vacancies that match skills and experience, although the applicant will always be contacted and consent taken prior to any information being sent to a third party.

Technology Resourcing will not send your CV to organisations with vacancies for which you may be appropriate, without your express consent. However, Technology Resourcing may send a profile of your skills and experience to organisations selected by Technology Resourcing. The profile would be created from your CV and other written or verbal information you have provided, but would not have any identifying information about you such as your name or contact details. Technology Resourcing understands that if you have a rare skill, it may be possible to identify you even without the identifying information mentioned above.

If you do not want Technology Resourcing to send profiles out to prospective employers, please contact the Office Administrator at [email protected]

Technology Resourcing has implemented measures and procedures that adequately protect the privacy of individuals and ensures that data protection is integral to all processing activities, as outlined in Technology Resourcing’s Information Security Policy.

Automated Decision Making

Technology Resourcing will not subject individuals to decisions based on automated processing that produces a legal effect or a similarly significant effect on the individual, except where the automated decision:

Is necessary for the entering into or performance of a contract between the data controller and the individual;

Is authorised by law; or

The individual has given their explicit consent

Data Retention Statement

GDPR regulates the way in which certain Personally Identifiable Information is used and held.

Technology Resourcing is registered with the Information Commissioner’s Office and fully complies with the requirements placed on it as a data processor.

The Technology Resourcing web site allows you to submit your CV to Technology Resourcing either with your Registration details or directly by email to a Technology Resourcing consultant in response to a particular job on the site.

Your CV can also be submitted via a job board in which we have used to advertise. We may also receive your CV if you submit it to us without applying for a particular job.

Once we have obtained your CV, Technology Resourcing will enter information contained in your CV to create a record about you on our internal computer system. Technology Resourcing may add to the information obtained from your CV with written or verbal information taken directly from you. The only information that will be added to the record about you on Technology Resourcing’s internal computer system will be information that is considered necessary or helpful and is intended to assist in the recruitment process.

We keep your personal data for no longer than reasonably necessary and will never disclose, share or sell your data without your consent, unless required to do so by law. We only retain your data for as long as is necessary, and for the purposes that we collected it for, specified in this privacy statement. This means we will retain your Personal Information throughout the period of your relationship with us and whilst we are providing you with work finding services. If you no longer wish to receive our services, we will continue to retain your Personal Information on our database for a further period of 2 years after our relationship ends, so that we can comply with our regulatory obligations. After the 2 year retention period expires, we will anonymise the Personal Information in our database so that we can no longer identify you.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. In some circumstances we may anonymise and privatise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you.

The purpose of the retention of your data is that it might be accessed and re-used in future recruitment processes; it might be used in relation to subsequent applications for employment made by you; and it may be used to respond to statutory reporting requests.

Technology Resourcing takes every precaution to protect your information. Access to your personal information is restricted within Technology Resourcing. Only employees who require information to perform a specific job may be granted access to this information. The servers on which Technology Resourcing store personally identifiable information are kept in a secure environment.

Personal Data Breaches

Where Technology Resourcing is a Data Controller:

Where Technology Resourcing establishes that a personal data breach has occurred, we will take steps to contain and recover the breach. Where a personal data breach is likely to result in a risk to the rights and freedoms of any individual, Technology Resourcing will notify the ICO. If it occurs outside the UK, Technology Resourcing will alert the relevant supervisory authority for data breaches in the effected jurisdiction.

Where Technology Resourcing is a Data Processor:

Technology Resourcing will alert the relevant data controller as to the personal data breach as soon as they are aware of the breach.

Communicating data breaches to individuals:

Where Technology Resourcing has identified a personal data breach resulting in a high risk to the rights and freedoms of any individual, Technology Resourcing shall tell all affected individuals without delay.

Technology Resourcing will not be required to tell individuals about the personal data breach where:

Technology Resourcing has implemented appropriate technical and organisational protection measures to the personal data affected by the breach, in particular to make the personal data unintelligible to any person who is not authorised to access it, such as encryption;

Technology Resourcing has taken subsequent measures which ensure that the high risk to the rights and freedoms of the individual is no longer likely to materialise;

It would involve disproportionate effort to tell all affected individuals. Instead, Technology Resourcing will make a public communication or similar measure to tell all affected individuals.

Cookies

Google Analytics gathers non-personal information regarding the visitors to our website on our behalf using code which is embedded on our website.

For more information on cookies, please click here to access our cookie policy.

Our website may also include links to third party websites, plug-ins, and applications. Clicking on those links may allow third parties to collect or share data about you. We do not control these third parties and are not responsible for their privacy statements.

Data Subject Rights & Complaints Procedure

You have the right to request a copy of the information held by Technology Resourcing about you in its records; if you wish to do so, please contact the Data Protection Officer at :- [email protected]. Your Subject Access Request will be processed within 30 days. Technology Resourcing may extend this period for two further months where necessary, taking into account the complexity and the number of requests. Information provided under GDPR Articles 13 and 14 and any communication and actions taken under Articles 15 to 22 and 34 shall be provided free of charge. Where requests are manifestly unfounded or excessive, we may charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the action requested; or refuse to act on the request. It is our responsibility to demonstrate the manifestly unfounded or excessive character of the request.

Under GDPR, your rights also include:-

the right to rectification

the right to erasure

the right to restrict processing

the right to data portability

the right to object

rights in relation to automated decision making and profiling

Should you wish to make a request in regards to these rights or have a query or complaint, please contact the Data Protection Officer in the first instance at [email protected].

If you wish to lodge a complaint with the Information Commissioner’s Office, you can contact them on 03031231113 or via email https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

In line with the Right to Rectification and Data Quality, you are responsible for ensuring that any information you provide to Technology Resourcing, including your CV, is accurate, complete and your own. Technology Resourcing is entitled, forthwith and without notice, to remove from the website or internal computer system any such information found to be false, inaccurate, incomplete or not your own. If you update your information, either by the website or directly to Technology Resourcing, the new information will replace the old registration information we have stored on Technology Resourcing’s internal computer system. We would appreciate it if you would update your registration details and CV whenever your details change. We are reliant on you supplying us with a factually accurate and complete picture of you, your experience and requirements.

Changes to our privacy notice

Any changes we make to our privacy notice in the future will be posted on this page. Please check back frequently to see any updates or changes to our privacy notice.